Copy protection of software and/or data

ABSTRACT

Autorun functionality is incorporated into a portable device such as a flash drive, a wireless adapter, a communication adapter, or any USB peripheral device. The portable device is connectable to a computing device (e.g. USB). The portable device may act as a security key to protect software or data running on the computing device from unauthorized use. At least part of the protected software or data may be stored in a protected memory component of the portable device which is not accessible by the user. Upon connecting the integrated circuit memory device to the computing device, the at least part of the protected software or data may run automatically on the computing device to enable the function of the protected software or data; whereby the user may run the protected software or data on the computing device while the portable integrated circuit memory device remains connected to the computing device.

CROSS-REFERENCES TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.10/823,513, filed Apr. 12, 2004 now U.S. Pat. No. 7,805,720, whichclaims priority to U.S. Provisional Patent Application Ser. No.60/462,080, filed Apr. 11, 2003, and a continuation-in-part of U.S.patent application Ser. No. 10/734,481, filed Dec. 12, 2003, whichclaims priority to U.S. Provisional Patent Application Ser. No.60/433,196, filed Dec. 12, 2002, which are incorporated herein byreference in their entirety for all purposes.

TECHNICAL FIELD

This invention relates to a system and method for utilizing storagemedia such as flash memory for achieving autorun of an applicationexecutable or installer stored on the storage media.

BACKGROUND AND SUMMARY OF THE INVENTION

As is known in the art, some applications such as software installersmay be run automatically upon insertion of a CD-ROM disc into a CD-ROMdrive, which may sometimes be called a dock or reader. In operation,this automatic running of an application is provided by an autorunfeature that is stored on or incorporated into CD-ROM drive dock/reader.Executables or installers stored on the CD-ROM disc are executed by thehost personal computer based upon activation by the autorun feature inthe CD-ROM drive dock/reader. In this implementation, the autorunfeature is incorporated into the hardware drive/dock/reader, which isseparate from the storage media.

Universal Serial Bus (USB) technology is rapidly gaining preference asthe interfacing technology of choice for peripherals on computingdevices such as personal or laptop computers. Flash memories coupledwith a USB interface has become a convenient and portable storage devicethat can replaces floppy disks and compact disks (CDs).

However, the popular and widely-adopted Universal Serial Bus technologydoes not include distinct autorun features in the docks/readers. As aconsequence, conventional integrated circuit memory devices such as USBmemory devices do not have autorun functionality.

Accordingly, the present invention provides autorun functionality to anyIC memory device, such as any USB peripheral, that has a memorycomponent interfaced to a computing device interface microcontroller.The present invention provides autorun of one or more executables orapplication installers from a memory component with an interface to acomputing device without an intermediate hardware-based autorun feature.As an example, such interface could be a USB interface and suchcomputing device could be a personal computer.

For example, each USB peripheral device internally contains a USBmicrocontroller that performs the functionality associated withidentifying the device to a host computing device, such as a personalcomputer. In accordance with the present invention, autorun firmware isembedded into the USB microcontroller. The autorun firmware enablesautorun of an installable or executable application stored on the memorycomponent of the USB device. The firmware acts as bridge componenttranslating all commands and interactions between a host PC and thememory component.

Additional description and implementations of the present invention willbe apparent from the detailed description of the preferred embodimentthereof, which proceeds with reference to the accompanying drawings.

BRIEF DESCRIPTIONS OF THE DRAWINGS

FIG. 1 illustrates an exemplary implementation of an autorun integratedcircuit (IC) memory device according to the present invention.

FIG. 2 is a block diagram of a prior art arrangement in which a hostpersonal computer includes an intermediate hardware dock that providesan autorun feature.

FIG. 3 is a flow diagram of an IC memory device autorun method.

FIGS. 4A and 4B illustrate autorun firmware according to the presentinvention be embedded into alternative USB device configurations

FIG. 5 is a block diagram of a USB peripheral having multiplefunctionalities.

FIG. 6 is a block diagram of a USB hub with autorun firmware and accessto multiple distinct functionalities.

FIG. 7 is a schematic diagram of a person-operable physical slideswitch.

FIG. 8 is a flow diagram of a software-implemented copy protectionmethod.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENT

FIG. 1 illustrates an exemplary implementation of an autorun integratedcircuit (IC) memory device 100 according to the present invention.Autorun IC memory device may be in the form of a USB memory device, acompact flash card, a smart card, etc. For purposes of illustration,autorun IC memory device 100 will be described with reference to auniversal serial bus (USB) memory device implementation.

Autorun IC memory device 100 includes a memory component 110 thatcommunicates with a USB microcontroller 120 having autorun firmware 130incorporated or embedded into microcontroller 120. Autorun IC memorydevice 100 includes an upstream port 140 for connecting to a hostcomputing device 150 (e.g., personal or laptop computer, handheldcomputer, PDA, smart phone, etc., not shown). In the illustratedimplementation, upstream port 140 is a USB port.

Autorun firmware 130 causes an application or executable stored inmemory component 110 to be installed or run automatically uponactivation of the IC memory device 100 vis-à-vis the host computingdevice 150. This activation may be achieved in a variety of waysincluding connecting or inserting the autorun IC memory device 100 intoa docking system or port present on or interfaced to the host computingdevice 150. For example, IC memory device 100 with autorun firmware 130incorporated into USB microcontroller 120 allows a “USB Flash Drive”storing one or more application executables or installables to be runautomatically (i.e., autorun) upon activation, such as being pluggedinto the USB port of a host PC 150.

FIG. 2 is a block diagram of a prior art arrangement in which a hostpersonal computer 200 includes an intermediate hardware dock 220 thatprovides an autorun feature for a storage medium like a CD-ROM 230.Intermediate hardware dock 220 functions as a storage media reader thatmay be internally integrated with or externally connected to the hostpersonal computer 200 and the storage medium 230.

In this prior art implementation, insertion of a CD-ROM disc 230 into aCD-ROM dock/reader 220 may cause activation of an autorun feature thatis stored on or incorporated into CD-ROM dock/reader 220. Executables orinstallers stored on the CD-ROM disc 230 may then be executed by thehost personal computer 200 based upon activation by the autorun featureCD-ROM dock/reader 220.

As another example of such a prior art implementation, a flash memorycard reader connected to a host computing device, such as a personalcomputer, may also include an autorun feature that can activate anexecutable or installer to run on the host computing device.

A disadvantage of such prior art implementations is that autorunfeatures are incorporated into hardware docks or readers that areseparate from the storage media. However, the popular and widely-adoptedUniversal Serial Bus technology does not include such distinct autorunfeatures. As a consequence, conventional integrated circuit memorydevices such as USB memory devices do not have autorun functionality. Incontrast, the present invention provides autorun functionality to any ICmemory device, such as any USB peripheral that has a memory componentinterfaced to a USB microcontroller.

FIG. 3 is a flow diagram of an IC memory device autorun method 300 thatmay be implemented from firmware 130 incorporated into a USB controller120.

In step 305, a USB peripheral is inserted into or connected to a USBport of a host computing device (e.g., a personal computer).

In step 310, the host computing device performs an enumeration toidentify the newly attached USB peripheral.

Step 320 is a query as to whether the USB peripheral includes autorunfirmware that is enabled. If so, step 320 proceeds to step 330. If not,step 320 proceeds to step 370.

In step 330, the autorun firmware in the USB peripheral announces itselfwith a device interface description. For example, the device interfacedescription may include Mass Storage Class, SCSI transparent commandset, Bulk Only Transport corresponding to a CD-ROM, for example.

In step 340, the host and the USB peripheral communicate with each otherusing, for example a standard MMC-2 specification set. The communicationincludes a response to host commands from the autorun firmware accordingto the MMC-2 specification. As a part of the MMC-2 specification, thehost requests enumeration of files in root directory and the autorunfirmware responds to the request.

In step 350, the autorun firmware informs the host of the presence of anautorun executable file to be executed and provides the file to thehost. For example, the file may be named “Autorun.inf,” which may bestored on the memory component of the USB peripheral. The host executesthe autorun executable file to provide the autorun functionality.

Step 360 is a query whether the autorun firmware is to be enumeratedagain or “re-enumerated.” If so, step 360 proceeds to step 370. If not,step 360 proceeds to step 390. Re-enumeration allows the autorunfirmware to announce itself to the host as one or more other USBperipherals (e.g. data storage device, communication adapter, etc.) or,if there is no re-enumeration, the autorun firmware can continue tofunction as per MMC-2 specifications.

In step 370, the autorun firmware re-enumerates or identifies itself asanother USB device, such as a USB flash drive or a USB wireless (e.g.,Bluetooth, WiFi, IrDA) device or “dongle.” With such a re-enumeration,the autorun firmware identifies itself with device interface descriptorsfor the other USB devices (e.g., USB flash drive or USB Bluetoothdongle).

In step 380, the autorun firmware loads the firmware associated with theenumerated USB peripheral (e.g., USB flash drive or USB Bluetoothdongle).

In step 390, the autorun firmware is configured to not re-enumerateitself and continues to act as a virtual CD-ROM type device implementingthe MMC-2 specifications.

Process steps 320, 330, 340, 350 and 360 correspond to the autorunfirmware implementation. Step 390 provides for the implementation of avirtual mass storage device from a memory component that implements SCSIcommand set and MMC-2 specifications.

Autorun firmware according to the present invention can be embedded intomultiple USB device configurations to provide a variety of unique USBperipherals with autorun functionality and into other peripheral deviceswith similar functionality. For example, FIG. 4A shows a USB hub 400 inwhich a USB microcontroller 410 with auto run firmware 415 communicateswith an internal memory component 420. In FIG. 4B, a USB microcontroller450 is connected to an external memory component 460 through a USBdownstream port 470.

With reference to FIG. 4A, the USB microcontroller 410 that forms a partof the USB hub 400 typically is a repeater type entity allowing forcascaded multiple USB peripherals to connect through a single upstreamport to a host system. The USB microcontroller 410 includes support forprogramming capability, which includes the autorun firmware 415. TheAutorun firmware can then be ported to work on the USB microcontroller410. The firmware may be stored on the internal memory component 420.Alternatively, the Autorun firmware may be stored on external memorythat is in an attached USB memory component 430.

As another configuration, FIG. 5 is a block diagram of a USB peripheral500 having multiple functionalities. In this implementation, USBperipheral 500 includes an internal microprocessor with USB interfacing510, or alternatively a USB microcontroller, that communicates with amemory component 520 and wireless (e.g., Bluetooth) networking hardware530. As a result, USB peripheral 500 is capable of operating as awireless (e.g., Bluetooth) networking device or “dongle” and as USBflash drive, both of which are accessible with autorun functionality

In one configuration, the microprocessor 510 has USB interfacingability. It is coupled with a memory component 520 and Bluetooth radiocomponent 530. Microprocessor 510 implements client layers of theBluetooth stack. The firmware that the microprocessor 510 executes isstored in memory component 520. The autorun firmware can also beadditionally stored as a part of the functionality of existing firmwareor separately in the memory component 520. In another configuration, themicroprocessor 510 may not directly have USB interfacing capability andcould use a separate USB microcontroller (not shown).

A feature of including autorun firmware in USB peripherals is thatsoftware applications can be bundled with the USB peripherals. Thebundled software application may or may not utilize the USB peripheral.

As an example, FIG. 6 is a block diagram of a USB hub 600 that includesa USB microcontroller 610 with autorun firmware 615 and access to one ormultiple distinct functionalities or USB peripherals, such as anexternal memory component 630, a Bluetooth networking component 640, ora WLAN component 650. Such USB peripherals 630-650 could be formed incombination with USB hub 600. USB hub 600 may be externally connectedwith one or more of these components 630-650, as illustrated, oralternatively one or more of the components 630-650 can be internallyintegrated to form a USB peripheral or device with multiple distinctfunctionalities.

There could be multiple executions of autorun firmware from each or someof these peripherals. Thus the autorun firmware allows for distributionof software (e.g. device drivers, synchronization software, etc.) thatcan be autorun along with any USB peripheral.

The implementation options also include mechanisms for allowing theautorun feature to be enabled or disabled by an external mechanism(e.g., switch) that is included on the device or peripheral. The switchcould be manually operable by a person. The switch could be a simpletwo-mode (e.g., autorun on/off) switch or could be a switch that selectsfrom among more than two modes.

FIG. 7 is a schematic diagram of a person-operable physical slide switch700 that allows a person to select from among multiple modes,functionalities, or peripherals available on a USB device or “dongle.”As an example, switch 700 relates to features or peripherals availablefrom USB hub 600 of FIG. 6, including external memory component 630, andwireless dongle or module (640 or 650) for adding wireless (e.g.Bluetooth, WiFi, IrDA) interface to its host PC.

In this exemplary illustration, switch 700 has 4 user-selectablepositions. In position 710, autorun functionality is enabled, thewireless component is disabled. In position 720, autorun functionalityis disabled, wireless component is disabled. In position 730, autorunfunctionality is enabled, wireless component is enabled. In position740, autorun functionality is disabled, wireless component is enabled.

The autorun firmware enables the distribution of software that can beautorun from a memory component. There is also a unique securitymechanism that can be incorporated to protect the software that isinstallable or executable from the memory component by the autorunfirmware.

A section of the internal memory component (e.g., memory component 620,FIG. 6) may be protected from public access by password protecting it orby physical security means such as a lock, among other means. The flashmemory component can also be segmented into public and private sections.Private sections can be used to store installable or executables thatcannot be viewed or accessed by the user, and public sections can beviewed or accessed by users in a conventional manner. The installable orexecutable software being distributed through the memory component canbe stored in the protected region of the memory component. Security byway of copy protection of this installable software can be achieved byallowing only an application launcher executable, which is autorun fromthe memory component, to access the installable software.

In one implementation, the application launcher executable has thefollowing characteristics: it is autorun from memory component, and ithas access to the protected or private region of memory component. Thisaccess is gained by authenticating itself to the memory controller (e.g.USB microcontroller) and/or to the installable software in the protectedregion of the memory component. The authentication mechanism may be apassword-based mechanism or a more involved cryptographic algorithm.Among the various techniques used for authentication are digitalsignatures and unique identifiers like the Bluetooth Device Address, MACaddress, etc. The application launcher executable may authenticateitself directly to the memory controller software and/or installablesoftware or to a separate authentication software that resides in theprotected region of the memory component.

The application launcher executable may be built generically to executeany or all executables and installables that exist within the protectedregion of the memory component. Alternatively, the application launcherexecutable may be programmed to launch a particular executable orinstallable from the protected region. Considering the possibility ofthe memory component being segmented into “n” protected sections where nis greater than 1, the application launcher executable may access one ormore of these sections in the mechanism described herein. The protectedmemory region may contain, for example, executable software (also calledan application executable), or installable software (also called anapplication installable), or protected data.

FIG. 8 is a flow diagram of a software-implemented copy protectionmethod for protecting of software that is executable or installable onusing autorun firmware.

In step 810, an application launcher executable that is stored in amemory component of an IC memory device is run automatically on a hostcomputer by an autorun firmware stored on the IC memory device. Theautorun firmware is operates automatically upon activation of the ICmemory device, such as occurs when the memory device is plugged into aport or socket of the host computer.

In step 820, the application launcher authenticates itself toauthentication agent software that resides in the protected region ofthe memory component. The authentication agent software may beincorporated within the software executable or installable that is beingprotected or may be a separate application. The authentication algorithmmay be password based or may involve cryptographic techniques.

Step 830 is a query whether the authentication is successful. If not,access to the protected executable or installable is denied. Ifauthentication is successful, step 830 proceeds to step 840 and theapplication launcher executable gains access to the protected memoryregion.

In step 840, the application launcher executable executes theapplication executable or installable that is stored in the protectedregion of the memory component. The application launcher executable mayalso be programmed to execute any or all executables and installablesthat exist within the protected region of the memory component.

In step 850, the executables and installables thus launched are executedon the host computer.

In view of the many possible embodiments to which the principles of ourinvention may be applied, it should be recognized that the detailedembodiments are illustrative only and should not be taken as limitingthe scope of our invention. Rather, we claim as our invention all suchembodiments as may come within the scope and spirit of the followingclaims and equivalents thereto.

1. A portable memory device connectable by a user to a host computingdevice for enabling said user to run or execute at the host computingdevice a protected software or data and not enabling said user to copythe protected software or data, the portable memory device comprising: acontroller for controlling interaction between the portable memorydevice and the host computing device; a memory component that includes aprotected memory component storing at least part of the protectedsoftware or data that is installable or executable on the host computingdevice by said user and at least part of the protected software or datastored in the protected memory component cannot be accessed and copiedby said user from the protected memory component; and an autorunsoftware stored on the memory device and executable on the hostcomputing device upon connection and activation of the portable memorydevice to the host computing device, the autorun software stored on theportable memory device including: software for running automatically onthe host computing device upon connection and activation of the portablememory device with the host computing device; software for accessing, bythe autorun software, at least part of the protected software or datafrom the protected memory component of the portable memory device independence of a successful authentication of the autorun software; andsoftware for installing, executing, or running, on the host computingdevice at least part of the protected software or data accessed from theprotected memory component of the portable memory device; whereby theportable memory device enables said user to operate, to run or toexecute the protected software or data on the host computing device uponconnection and activation of the portable memory device with the hostcomputing device and not enabling said user access to the protectedmemory component for copying at least part of the protected software ordata from the protected memory component of the portable memory device.2. The portable memory device of claim 1 further comprising a UniversalSerial Bus hub for enabling interface with one or more functionalcomponents or devices.
 3. The portable memory device of claim 1 furtherincluding a public memory component that can be viewed or accessed bythe user.
 4. The portable memory device of claim 1, further comprising awireless component for adding a wireless interface to the host computingwith the wireless component.
 5. The portable memory device of claim 1further comprising a user operable external manual switch on theportable memory device that is accessible and operable by said user toselect from among plural operating states.
 6. The portable memory deviceof claim 1 further comprising one upstream port for interfacing orconnecting with the host computing device and two or more downstreamports.
 7. The portable memory device of claim 1 further comprising aconnection that is connectable to a host computing device over aUniversal Serial Bus connection port.
 8. A method of distributingprotected data or software with a portable memory device for copyprotection of the protected data or software, the portable memory deviceincluding, a controller for controlling interaction between the portablememory device and a host computing device; a memory component thatincludes a protected memory component storing at least part of theprotected software or data that is installable or executable on the hostcomputing device by a user and the at least part of the protected dataor software stored in the protected memory component cannot be accessedand copied by said user from the protected memory component; and anautorun software stored on the memory device and executable on the hostcomputing device upon connection and activation of the portable memorydevice to the host computing device, the method comprising: runningautomatically at least part of the autorun software on the hostcomputing device upon connection and activation of the portable memorydevice with the host computing device; accessing, by the autorunsoftware, the at least part of the protected software or data from theprotected memory component of the portable memory device in dependenceof a successful authentication of the autorun software; and installing,executing or running, on the host computing device, by the autorunsoftware, the at least part of the protected data or software accessedfrom the protected memory component of the portable memory device;whereby, the portable memory device enables said user to operate, to runor to execute the protected software or data on the host computingdevice stored in the protected memory component of the portable memorydevice and not enabling said user access to the protected memorycomponent for copying the at least part of the protected software ordata from the protected memory component of the portable memory device.9. The method of claim 8 in which the portable memory device furtherincludes a public memory component that can be viewed or accessed by thesaid user.
 10. The method of claim 8 in which the portable memory devicefurther comprises a wireless component for adding a wireless interfaceto the host computing device with the wireless component.
 11. The methodof claim 8 in which the portable memory device further comprises a useroperable external manual switch on the portable memory device that isaccessible and operable by said user to select from among pluraloperating states.
 12. The method of claim 8 in which the portable memorydevice further comprises one upstream port for interfacing or connectingwith the host computing device and two or more downstream ports.
 13. Themethod of claim 8 in which the protected data or software is associatedwith a wireless software running or executing at the host computingdevice.
 14. An integrated circuit memory device connectable by a user toa host computing device for running or executing a protected data orsoftware on the host computing device without providing said user meansto copy at least part of the protected data or software from theintegrated circuit memory device, the integrated circuit memory devicecomprising: a controller for controlling interaction between theintegrated circuit memory device and the host computing device; aprotected memory component storing at least part of a protected data orsoftware that is installable or executable on the host computing deviceby said user and the protected memory component is not viewable oraccessible by said user; a public memory component that is viewable oraccessible by said user for storing data or software components that areviewable or accessible by said user; the integrated circuit memorydevice being further configurable to include: means to install, execute,or run automatically one or more autorun software on the host computingdevice upon connecting the integrated circuit memory device to the hostcomputing device by said user; means to access at least part of theprotected data or software, by the one or more autorun software, fromthe protected memory component of the integrated circuit memory devicefor installing, executing, or running the protected software or data onthe host computing device employing the at least part of the protecteddata or software accessed from the protected memory component of theintegrated circuit memory device; whereby the integrated memory deviceenables said user to run or to execute on the host computing device theprotected data or software stored in the protected memory component ofthe integrated circuit memory device and the integrated memory devicedoes not enable said user means to access the protected memory componentand to copy the at least part of the protected data or software from theprotected memory component.
 15. The integrated circuit memory device ofclaim 14 in which accessing the protected memory component by theautorun software includes an authenticated step by the autorun software.16. The integrated circuit memory device of claim 14 in which thecontroller and the public memory component operate together as a flashdrive storage device to the host computing device.
 17. The integratedcircuit memory device of claim 14 further comprising a user operableexternal manual switch that allows a user to select from among pluraloperating states of the integrated circuit memory device.
 18. Theintegrated circuit memory device of claim 14 further comprising awireless component for adding a wireless interface to the host computingdevice.
 19. The integrated circuit memory device of claim 14 furthercomprising a connection that is connectable to a Universal Serial Busport of the host computing device.
 20. The integrated circuit memorydevice of claim 14 in which the memory component includes an externalmemory added to the integrated circuit memory device.